Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/7A75D42E45B211EB99335867C4F9AE02.roa
File: 7A75D42E45B211EB99335867C4F9AE02.roa (raw, json)
Hash identifier: NsZ4F3z/UkG4nWlQYLX7FdM8TeLtW3jisug+AwHpPsg=
Subject key identifier: E2:7A:3C:06:A5:EC:25:D3:19:9D:B9:C3:54:15:00:99:47:81:E0:6B
Certificate issuer: /CN=A915FC0B/serialNumber=17948C8779C59E65CAFCE2EFDCB1CB509113844C
Certificate serial: 06A4
Authority key identifier: 17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/7A75D42E45B211EB99335867C4F9AE02.roa
Signing time: Sat 16 Nov 2024 22:00:36 +0000
ROA not before: Sat 16 Nov 2024 22:00:36 +0000
ROA not after: Tue 30 Dec 2025 00:00:00 +0000
asID: 139668
IP address blocks: 103.143.91.0/24 maxlen: 24
103.177.19.0/24 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 1700 (0x6a4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A915FC0B/serialNumber=17948C8779C59E65CAFCE2EFDCB1CB509113844C
Validity
Not Before: Nov 16 22:00:36 2024 GMT
Not After : Dec 30 00:00:00 2025 GMT
Subject: CN=67391604-d6c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cc:90:11:47:a2:42:75:c7:98:6f:c1:e3:fb:0b:
64:c9:e5:34:1c:27:dd:3c:8d:23:a4:1f:0d:5c:5b:
b7:cb:84:49:53:20:56:82:53:8b:e0:2d:fd:b0:6c:
7f:39:d9:66:bf:87:d4:ec:4f:d3:5c:b5:fa:13:ad:
c1:f8:e2:bd:2a:7f:4e:8d:62:18:e2:db:61:63:9a:
12:a1:dc:cb:0d:9e:a7:5a:59:4b:57:90:83:84:d6:
97:1c:b3:b2:d2:f5:08:94:02:93:04:fa:f3:0f:3c:
d2:44:d5:a5:7e:8a:d6:40:40:8c:89:2d:8d:ae:e1:
4a:9d:18:00:be:b6:92:c6:82:6e:03:06:79:86:f1:
16:16:16:9e:51:16:ba:e0:25:70:f4:5e:33:9a:5b:
4b:d5:05:d2:40:9c:aa:87:d5:40:fa:48:67:71:bb:
72:7e:f3:0d:69:84:49:de:ec:c9:5f:99:f3:7b:a0:
fe:e5:25:1c:36:01:b2:a8:78:1a:73:21:21:c1:c3:
f6:62:f1:38:cb:97:7a:7c:05:f6:bb:73:56:c1:d2:
d2:14:90:23:78:f9:fd:ee:e1:2f:09:ef:4a:fb:84:
87:bc:06:2e:a3:5b:ff:1d:6b:a5:56:dd:e9:ed:3a:
d4:19:74:e5:bb:e8:f2:15:53:de:1a:e1:0d:b3:49:
91:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E2:7A:3C:06:A5:EC:25:D3:19:9D:B9:C3:54:15:00:99:47:81:E0:6B
X509v3 Authority Key Identifier:
keyid:17:94:8C:87:79:C5:9E:65:CA:FC:E2:EF:DC:B1:CB:50:91:13:84:4C
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/F5SMh3nFnmXK_OLv3LHLUJEThEw.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/F5SMh3nFnmXK_OLv3LHLUJEThEw.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A915FC0B/BEE7558045B011EBA3696D63C4F9AE02/7A75D42E45B211EB99335867C4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.143.91.0/24
103.177.19.0/24
Signature Algorithm: sha256WithRSAEncryption
46:cb:f2:8a:0a:62:3b:60:9d:80:0f:1b:10:ba:f5:7f:85:84:
00:4b:ca:ce:85:42:40:b4:32:69:84:ee:c3:90:02:03:bd:00:
1c:22:f7:95:b7:48:b1:43:ab:f2:e6:23:f1:82:80:2b:69:5a:
ee:b5:b0:89:3d:01:4f:d8:07:db:c7:c9:c7:b3:97:6b:07:b8:
4b:3e:ee:af:c9:b4:f6:37:de:85:f0:d9:ea:4d:25:16:26:1a:
b3:39:81:ee:9c:0b:b6:4f:3b:50:ea:e4:c0:ec:29:37:7d:94:
4c:c0:d4:4d:24:91:81:32:f0:a8:78:a0:95:47:46:40:d9:c8:
08:d6:78:b3:65:a0:ab:22:5f:c5:03:d6:2a:93:63:9b:63:e6:
99:5d:73:df:38:07:23:b6:2f:a6:d3:6f:91:28:f1:26:15:23:
0e:b3:bd:47:0d:a6:90:07:db:8d:e6:5a:27:d8:02:94:e7:da:
11:9a:b0:e8:66:c3:88:aa:4d:2e:b8:fa:1b:13:ff:60:cf:ea:
b8:14:c3:1d:23:64:e8:e2:21:ab:fc:ce:fb:04:fc:a1:bb:61:
fa:0d:6f:95:6b:4c:c3:06:01:b9:bc:ba:97:fd:f2:ef:a2:73:
31:53:af:d9:69:bf:31:7b:6d:1e:96:c9:12:2b:45:06:0d:2f:
0b:06:3d:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Apr 25 06:43:08 2025 by rpki-client